CVE-2020-13947 - XSS in WebConsole
Jean-Baptiste Onofre <[email protected]> Mon, 8 Feb 2021 06:24:28 +0100
| Newsgroups | gmane.comp.java.activemq.devel,gmane.comp.jakarta.avalon.user |
|---|---|
| Message-ID | <73AC6C7E-C1C4-42FD-98A7-2F1DD6703F49__39427.6077904337$1612761890$gmane$org@nanthrax.net> |
--Apple-Mail=_D235F083-56DB-4CA4-92A4-58BF5F49D551 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii CVE-2020-13947 - XSS in WebConsole Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache ActiveMQ prior to 5.15.12 and 5.16.0 Description: An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 to 5.16.0. Mitigation: Upgrade to at least Apache ActiveMQ 5.15.13 or 5.16.1 Credit: This issue was discovery by: * qiang qiang <[email protected]> --Apple-Mail=_D235F083-56DB-4CA4-92A4-58BF5F49D551--